Senior Security Engineer - Infrastructure Security, Disney+ Hotstar

工作概要:

Key Responsibilities

• Collaborate with cross-functional teams to design and architect secure cloud infrastructure solutions on AWS and GCP.
• Identify potential security vulnerabilities and gaps in existing infrastructure and propose remediation plans.
• Knowledge of the DevOps culture and principles.
• Identify and help mitigate security issues, misconfigurations, and vulnerabilities related to cloud, container and Kubernetes infrastructure
• Utilize platform for security analytics and identification of tactics, techniques and patterns of attackers
• Develop a procedural set of responses to security problems
• Understand VMs, docker containers and their orchestration with its challenges (e.g. Kubernetes, docker)
• Strong understanding of network concepts including TCP/IP, HTTP and TLS, DDoS detection/prevention, and network and host anomaly detection through both automated (NIDS/HIDS) and manual means.
• A good knack for automating infrastructure security as much as possible
• Proficient in any one programming language (e.g. Golang, Python, JavaScript, etc.)

Skills & Attributes for Success

• Worked with a service mesh to encrypt communication
• Experienced in large scale distributed system
• Experience in tools for securely accessing secrets (e.g. Vault)
• Experience with configuration management: Terraform,Puppet, Chef, Ansible etc
• You play a key leadership role in assisting software development teams in securely architecting/operating their software applications by aligning to the SE secure software development principles, industry standard methodologies, compliance and privacy requirements.
• You will be a high-level individual contributor who will lead security architecture assessments, build and drive security standards and design capabilities to hold development teams accountable to reducing and improving trust with SE employees, partners, and customers.
• You will build, promote and scale the best DevSecOps practice across the company globally and drive adoption of tools and practices as the teams transform to DevSecOps.
• Willing to learn
• Zero tolerance for security vulnerabilities and process inefficiency
• Always look for opportunities to optimize, automate and secure the daily workflow
• See beyond the current norm of operation, then design and implement solutions in stages
• Great communication skills in building culture for other engineers to do the same

Preferred Education & Experience

• Bachelor's Degree in Computer Science or related field with 4 to 6 years of experience with configuration management: Terraform,Puppet, Chef, Ansible etc